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SPECIFICATION 

Personal identification device 

5 The present invention relates to a personal identifica- 
tion device which can enable an individual to provide 
proof of identity or enable validation of an indi- 
vidual's right of access to various facilities, which 
may additionally incorporate storage means for a 
1 0 variety of personal information about the individual. 
A variety of different types of identification devices 
are known, some of these being in the form of sec- 
urity passes, wherein an access code is stored on a 
card, and in theform of a magnetic strip or a combin- 
1 5 ation of magnetized dots or in the form of optical 
character readable print. Such cards may addition- 
ally include one or more photographs of the holder 
and the holder's name, signature, status etc. Further, 
credit cards, charge cards or cash cards are known 
20 which enable a user to access a bank computer in 
order to withdraw money from their current account 
or to obtain cash advances from a credit account, or 
to obtain goods and services from retailers or re- 
staurants orthe like. Such cards are normally issued 
25 by banks and other financial institutions to allow 
their customers access to a range of services prov- 
ided forthem. In addition, independent credit card 
companies also exist and a variety of targe chain 
stores and mail order stores have their own credit 
30 card schemes, so that there is a potential for an indi- 
vidual to have dozens of different cards available to 
him. With many of these cards, particularly those 
issued by banks, a customer can obtain a personal 
identification number (p.i.n. code) for use with a part- 
35 icular banks card for use when obtaining access to 
his own account or accounts at the bank or for mak- 
I ing cash withdrawals or other financial transactions. 
In view of the large number of cards which utilise 
such a p.i.n. code, the user may have to remember 
4fl several different p.i.n. codes for different accounts 
which he holds. The p.i.n. code is essential with such 
devices to assure security of access to an individual 
user's account, since the card and correct p.i.n. 
number are required before the card can be utilised 
45 In accessing the information via a cash dispenser or 
service till. 

It is a disadvantage of the present type of devices 
that each company issuing a card utilises their own 
coded information on the card for identifying the ac- 

50 count of the user, which is then confirmed by the user 
by input of the correct p.i.n. code, so that existing 
cards are not fully interchangeable with cards of an- 
othersupplierand because of the large numbers of 
cards which may be involved, a user may have to 

55 attempt to remember several p.i.n. numbers for the 
various cards held. The result of this problem is often 
that the user of the ca rd, despite wa rn ings from the 
company issuing the card, will often write down the 
p.i.n. number on something carried with the card, so 

60 that in the event the number is forgotten the number 
can be looked up readily. Unfortunately, this does 
cause security problems in that, if the card is stolen, it 
may bethatthe security number will also have been 
stolen, thereby giving the thief immediate access to 

65 the card holder's personal account 



In order to overcome such a problem, it would be 
preferable to attempt to provide a single device, 
which is capable of being utilised by all users and 
which contains universally acceptable information 

70 about the user for enabling correct identification of 
the user and which at most requires the user to re- 
membera single p.i.n. number but may alternatively 
utilise another time of personal information, for ex- 
ample, a uniquefingerprint or voice print of the user, 

75 in orderto establish identity for access to secure in- 
formation or accounts, utilising existing terminal 
equipment with suitable minor modifications where 
necessary. 

It is the aim of the present invention to seek to pro- 

80 vide a personal identity device which may suitably be 
used as or incorporated in an item of jewellery, or 
alternatively may be incorporated in a wristwatch, 
pocket-watch or calculator, according to the user's 
preference, and which is capable of enabling es- 

85 tablishment of the identity of the user. 

According to the present invention there is prov- 
ided an electronic identity device including means 
for enabling output of identity information upon ac- 
tivation thereof. 

90 Preferably, the output of identity information is 
time-dependent and said means comprises a multi- 
number time-dependent code generator syn- 
chronised with an identical, remote code generator 
capable of confirming the identity of the device and 
95 the user thereof in a secure system, upon input of a 
personal identity access code or a personal char- 
acteristic of the user. The personal identity access 
code may be a conventional p.i.n. number which 
may be input into an electronic console or may com- 

100 prise a personal characteristic of the user, e.g. a fin- 
gerprint or voice print. 

Further preferably, the device may also include 
stored therein various non-secure items of informa- 
tion such as the specific medical history of the user, 

105 giving details of any special medical requirements in 
an emergency, i.e. blood group, allergies etc., which 
may be suitably accessed in an emergency. The de- 
vice may also include other personal information 
such as driving licence number, insurance certificate 

110 number and insurance details of the owner's vehicle 
etc., or the passport number and an image of the user 
which may either be displayed on the device itself or 
be transmitted via a suitable link to a console fordis- 
play of such information as required, e.g. for a 

115 customs or immigration official. 

The device of the present invention may suitably 
be incorporated in an item of jewellery such as a 
wristwatch, pendant or bracelet or the like or in a 
pocket electronic calculator or travel alarm clock and 

1 20 may include its own display or be connectable to or 
capable of communicating with another device such 
as a compatible terminal in a bank or other establish- 
ment for the display of information. The device may 
include long-life batteries or may utilise solar cells or 

125 a combination of these to prolong useful life thereof 
if required, but the device is preferably provided as a 
sealed secure unit having a predetermined life, so 
that secure inform ation may only be input to the de- 
vice initially and may not subsequently be altered or 

130 updated, although separate means may be provided 
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for input and update of non-secure information, as 
referred to above. 

The device of the present invention provides a use- 
ful identity device, which is less likely to be lost or 
5 misplaced than identity cards or bracelets or credit 
cards or the like and which is capable of storing a 
variety of information, including emergency inform- 
ation about the wearer in a single device, which may 
be used for a variety of purposes, including entry ac- 

1 0 cess to a vehicle security system or home security 
system belonging to the user. The device could also 
include or activate a small transm itter f or the output 
ofasignalforoperating equipment remotelyfrom 
the device, e.g. for disarming a secu rity system or op- 

15 ening a security door or the like or for communicat- 
ing directly with a radiotelephone network to enable 
transactions to be performed at a variety of locations, 
for example, by suitable interfacing with a cellular 
telephone device. Similarly, such devices may be 

20 used additionally as a paging device to enable the 
wearer to be contacted whatever his location may be 
again utilising the cellulartelephone network. 

Depending upon the intended usage of device, 
such may be provided with, or connectable to, an 

25 appropriate keyboard module to enable such to be 
used as a data storage means or possibly a display 
for another device such as a calculator or even con- 
nectable to a portable computer. 
The device may include a tamper-proof a rrange- 

30 ment which would actto prevent access to the secure 
identity information or unauthorised output of in- 
formation, other than emergency information which 
may be required. 
The present invention will now be described 

35 further, by way of example, with reference to the ac- 
companying drawings, in which:- 

Figure 1 illustrates schematically, a module ac- 
cording to the present invention; 
Figure 2 illustrates a possible example of the 

40 module of Figure 1 in use with a verification console; 
Figure 3 illustrates a possible construction of a 
module according to the present invention and utilis- 
ing a sensitive matrix for scanning a fingerprint app- 
lied thereto; 

45 Figure4\sB block diagram of a possible circuit for 
performing the function of the present invention 
when utilising a fingerprint as identification means; 

F/^re5illustratesthe internal program of a time 
dependent code generating device incorporated in a 

50 device of the present invention; and 

Figure 6 illustrates the corresponding program 
steps in a remote device capable of being finked with 
a module utilising the program set out in Figure 5. 
Referring firstly to Figure 1 , an example of a per- 

55 sonal data module device 10 is shown schematically 
illustrating the manner in which the device 1 0 may be 
loaded with information upon commissioning 
thereof for a particular user, including personal ac- 
count information and details for establishing the 

60 identity of the user, including a personal char- 
acteristic or a p.i.n. code. In addition, the user may be 
allowed to input personal data, either by supplying 
such information to the institution issuing the device 
10, or via a console supplied with the device, or on a 

65 keypad incorporated in, or able to communicate 



with, the device. 

The relevant information stored in the device 10 
can be stored in a central computer unit of the institu- 
tion issuing the device so that, at a subsequent date, 
70 when the device is activated and is in communication 
with a peripheral connected to the institution's cen- 
tral computer of the institution, e.g. a bank, the user 
is able to access personal account details etc. and up- 
date and make requests of the central computer. 
75 Alternatively, the device 10 could simply communi- 
cate with a console, which may be manned, such 
console being capable of producing a visual display 
20, as shown in Figure 2, which can display to the 
operator personal information about the holder of 
80 the module in orderto establish the identity thereof, 
for example the signature, photograph, or other per- 
sonal information about the user which the operator 
can utilise to verify his identity. 
As can be appreciated from the above, there are a 
85 variety of applications in which the module can be 
used whether used by a bank teller, or retailer deal- 
ing directly with the customer, or via an automatic till 
or cash dispenser or the like. 
As referred to above, the device is preferably incor- 
90 porated in a watch, since such may already contain 
much of the circuitry necessary for performing the 
functions of the device, namely a microprocessor 
and associated program storage and data storage 
means and a liquid crystal display. Relatively corn- 
95 plex watches are available which include storage fa- 
cilities and indeed which are connectable to compu- 
ter devices to enable uploading and downloading of 
information therefrom and may act as a display de- 
vice for a miniature computer or calculator. As such 

1 00 therefore, many of the fu nctions of the watch as en- 
visaged by the present invention can be readily com- 
bined from existing devices, but additionally inclu- 
des a secure personal p.i.n. code, known only to the 
user, or personal characteristics of the user, for ex- 

105 ample, the characteristics of thefingerprintorvoice 
print of the user which can be used to activate the 
secure operation of the device, when seeking access 
to sensitive installations, not only including personal 
bank information relating to the user, but also for 

110 general security purposes, if desired. Once correctly 
actuated by such secure means, the device can then 
be utilised by such secure means, the device can then 
be utilised to enable access to such secure installa- 
tion or equipment by transmission of a code signal 

1 1 5 unique to the device and recognisable by the security 
equipment controlling access to such information or 
installation, such secure code being able to be trans- 
mitted directly thereto by any of a variety of means, 
including an ultrasonic or infrared signal or a direct 

1 20 electrical link to the equipment or by a short range 
radio transmission. As an alternative to incorporat- 
ing such features in the watch itself, the means for 
inputting the personal identity number orthe voice 
orfingerprint could be contained within the console 

1 25 of the equipment with which the device is com- 
municating such that on actuation of the device by a 
non-secure means, the installation being sought to 
be accessed identifies the specific watch in question 
and awaits a confirmation by means of the input of a 

1 30 personal code into the machine itself or by the applic- 
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ation of a recognisable thumb print or fingerprint or 
upon recognition of the required voice matching the 
voice print stored by the computer. As such, there- 
fore the device itself requires very few component 
5 parts, the bulk of the recognition system being con- 
tained within the console, ratherthan the wrist watch 
thereby enabling simplification of the construction of 
the device. 

Referring now to Figure 3, this illustrates in an ex- 

10 plodedviewa possible construction of awristwatch 
in which the electronic circuitry is contained on a PCB 
30 containing the necessary electronic circuitry in 
micro-electronic form, including the normal watch or 
clock function devices together with micro- 

15 processor and memory storage chips 31 and devices 
32forenabling communications, either by utilising 
an on-chip transmitter and/or receiver 33 and pos- 
sibly a modem 34, enabling the device to be utilised 
in communication with other devices down a cable 

20 connector, or vai an antenna which is preferably 
formed by the bracelet of the watch. In additions 
transparent matrix 36 overlies ah LCD display 37 in 
orderto detect the conformation of a fingerprint ap- 
plied thereto. Suitable buttons 35 may be provided 

25 on the watch case to enable actuation of the device 
and for control of the various clock functions in order 
to enable other fu nations, which may be required of 
the watch, to be performed. 
Referring now to Figure 4, this is a block circuit dia- 

30 gram illustrating the manner in which the com- 
ponents can be connected together to perform the 
function as described above in the embodiment of a 
watch having a pressure sensitive matrix for detect- 
ing a fingerprint applied thereto, in the arrangement 

35 shown in Figure4, the device is controlled by a mic- 
roprocessor 40 with associated fixed or read-only 
memory 41 for storing secure details including data 
relating to the configuration of the fingerprint of the 
user for comparison with the configuration of the fin- 

40 gerprint applied to the matrix upon actuation of the 
device. In addition, a variable or updateable memory 
42 can additionally be provided to store information 
which is likely to be changed from time to time, for 
example any personal information. The micro- 

45 processor 40 also controls the normal clock functions 
of the watch, details of which are not shown, but are 
standard in the art, as well as controlling enabling of 
the display 43 or a ny of the various interfaces 44 or 
radio transmitter and receiver 45 according to which 

50 are provided In the device. For example, the display 
43, in addition to bei ng able to display the normal 
time and various clock functions as per a standard 
watch, such can store other i.d. information or per- 
sonal details, according to the purposes to which the 

55 device is to be applied, including any messages 
which may have been received by the device if such 
is used in a radio reception mode, for example for 
radio paging orthe like via the cellular telephone net- 
work. Alternatively, the display 43 of the watch may 

60 only display the clock functions, the security aspects 
of the device being achieved by transmission of app- 
ropriate coded information to a console via a short 
range ultrasonic or infrared or radio transmission or 
via a direct local connection by a short lead to a de- 

65 vice with which it is to communicate. The particular 



manner in which the device would function in prac- 
tice would be determined entirely by the intended 
use and the desired features to be incorporated. For 
the purpose of direct connection or facilitating radio 

70 transmissions or ultrasonic infrared signals to be 
transmitted, then appropriate interfaces and re- 
ceivers are supplied again controlled by the micro- 
processor 40, as required. 
It is considered that in one possible embodiment, 

75 as fa r as the user is concerned, the device perf o rms 
only normal functions of a watch or other device in 
which the device of the present invention is incor- 
porated, with all the necessary communication with 
security systems being performed in a mannernot 

80 apparent to the user, so as to avoid complicating the 
device, the user only being required to make ap- 
propriate in put to a console with which the device is 
to communicate, in which case the various more 
complex pieces of apparatus which may be required 

85 for use with the device can be incorporated in the 
console. Forexample, upon actuation of the device, a 
signal is transmitted to the console to identify the 
user and then confirmation of the identity of the user 
is input by the user directly into the console, i.e. 

90 either by applying his fin gerprint to a designated part 
of the console, so that such may be scanned, or by 
inputting a personal identity number, or for example 
by speaking into the console or by writing his sig- 
natureon a sensitive portion of the console, or by any 

95 suitable other alternative means, which may be con- 
sidered to be a suitable unique personal char- 
acteristic to confirm identity of the user before access 
is permitted to the facilities of the console or into a 
secure location. 

100 As it will be appreciated, all of such facilities may 
be'provided on the device itself or be provided on a 
further device connectable to the device of the inven- 
tion. A further alternative which is envisaged is the 
use of a video card or disc in which the information is 

1 05 permanently stored thereon and which is associated 
with the device of the invention to confirm identity 
and to minimize the amount of storage required in 
the device itself, such video disc or card being incor- 
porated in the device, if necessary, possibly forming 

1 1 0 part of the casing or accommodated therein. 

Referring now to Figures 5 and 6 r these illustrate 
flow diagrams of a secure method of identifying a de- 
vice according to the present invention, in which a 
matched pair of modules 50, 60 are provided, each 

1 1 5 being constructed from appropriate memory devices 
and being programmed with an identical sequence 
of code numbers, said sequence being generated at 
random. The pair of modules are readily identified 
both in internally and externally to ensure that these 

1 20 are correctly matched when used. One of such mod- 
ules 50 is then incorporated in the device of the pre- 
sent invention and another of such modules 60 is in- 
corporated in a central computer of the institution 
issuing the device. The sequence of numbers in the 

125 modules 50 and 60 constitutes a list in which one of 
said numbers in said list is current for a predermined 
period of time, such that at the same time the two 
numbers in the two modules are identical. Thus, if 
the module 50 contained in the device of the present 

1 30 invention is interrogated and the number provided 
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thereby is compared with the number currently in the 
matched module 60 in the central computer, such 
numbers will be identical and the device will be uni- 
quely identified. Since such sequences of numbers 
5 are generated at random for each matched pair of de- 
vices, the likelihood of another similar device pro- 
ducing the same number at the same moment in 
time, although it is statistically possible, would be in- 
fini- 

10 tesimally small. 

Thus, the userofthedevice, upon actuation 
thereof, could either have the internal code number 
currentinthe list displayed on his device, ortrans- 
mitted directly to the console so that upon input 

15 thereof into the console together with othermeansof 
confirming his identity, for example using a p.i.n. 
number, fingerprint, voice print or other personal 
characteristic, the identity of the user can be con- 
firmed. The moduel 60 in the central computer will 

20 have meantime indicated to the data base of the insti- 
tution the correct identity of the user of the device 
having that code numberat that particular moment 
in time allowing for any transmission delays, etc., 
and will have looked for confirmation of the identity 

25 of the user by appropriate input either into the device 
of the user or into a console, such as a cash dispenser 
orservicetill before permitting access to the facilities 
thereof. When correct identification has been con- 
firmed, the number used is deleted from the list in the 

30 code sequence, so that such cannot be used again, 
thereby preventing the possibility of anyone attemp- 
ting to memorise the number and determining the 
cycle time of the device and thereby attempting to 
reuse that number. This feature also provides an in- 

35 built obsolenscence of the device, so that a fresh 
module can be issued periodically providing an 
additional degree of control over the use of such 
modules by the institution. 
The generalised program steps required for per- 

40 formanceofthe necessary routines internally in the 
device of the present invention and in the central 
computer containing access to the personal account 
information etc. are shown in the flow diagrams of 
Figures 5 and 6. 

45 In addition to the envisaged uses in a bank environ- 
ment other financial institutions could also utilise 
such a system, since many building societies are 
now operating cash dispensers and service tills, and 
it may be that such a system cou Id constitute the 

50 basis of an electronic identity card, which can be 
used by the security services for unequivocally 
identi- 
fying an individual. In this sense, it is envisaged that 
such may be of particular value in the area of pass- 

55 port control, with the personal information, includ- 
ing a photographic image of an individual, stored in a 
central computer and accessed as required by 
customs officials in orderto establish the identity of 
the user of the device, but such arrangements would 

60 require international agreement in orderto permit 
widespread use of such a system. 

A further application into which the device of the 
present invention may be used is in electronicfund 
transferat point of sale (eftpos), so that anytransac- 

65 tion made by the user would involvesuch a device, 



so that monies could be deducted either from a credit 
account of the user, or directly from a current ac- 
count; access to the users personal account being 
available via a suitable terminal in the retailers pre- 

70 mises. Such an embodiment could lead to an arran- 
gement providing an effectively cashless society, 
which would give considerable central control, 
which might not always be welcomed by the general 
public, over cash flow in the economy, in that such 

75 information would not only be available to the insti- 
tutions providing the use of facilities, but could also 
be made availableto tax authorities. This would en- 
able a considerably reduction in "cash only trans- 
actions" and provide a considerable hurdle to the 

80 black economy, at least from the point of view of 
supply of materials and equipment, and such could 
have considerable economic effect. 

Further, with the advent of computers across a 
wide spectrum of society, with a suitable interface, 

85 such a device cou Id also provide the user with access 
to his personal account directly from a home console 
or home computer, providing the user with much 
greater control over his accounts and enabling him 
to perform transactions at home rather than having 

90 to visit a banks premises and having to rely upon the 
issuance of statements, etc, to check the status of his 
account Therefore, such a device could provide the 
user with considerable benefits and a greater degree 
of flexibility and control over his own personal 

95 affairs. Indeed, the user cou Id use such computer- 
based facilities for purchasing items or booking fa- 
cilities such as theatre tickets etc. from home, having 
the appropriate amounts deducted directly from his 
own personal account similar to the facilities which 
100 already exist via PRESTEL in the U.K. 

As will be appreciated from the above, the device 
of the present invention has considerable advan- 
tages over existing prior art devices and it provides 
for a wide range of alternative services and facilities 
105 to be provided to the user, who will also have greater 
degree of control over his own personal financial 
affairs. 

Whilst the device of the present invention is prefer- 
ably incorporated in a wrist watch, this being an item 

1 1 0 which virtually everyone possesses and is often the 
first item put on in the morning and the last item 
taken off at night, and provides the ideal basis for in- 
corporation of the device of the present invention, 
since it already contains many of the components 

1 1 5 necessary for performance of the functions thereof, 
the device could equally be Incorporated in any other 
personal item, including a personal calculator an 
item of jewellery according to preference. 
Further, such a device, as envisaged by the inven- 

1 20 tion, may be used with existing credit cards but using 
the device in a watch to display or transmit coded 
information to be used in conjunction with the in- 
formation on the credit card and p.i.n. numberto pro- 
vide a further degree of security over existing arran- 

125 gements. 
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CLAIMS 

1 . An electronic identity device including means 
for enabling output of identity information upon ac- 

5 tivation thereof. 

2. A device as claimed in claim 1 wherein said en- 
abling means includes means for receiving and com- 
paring input information with data stored in said de- 
vice and only outputting said identity information 

1 o upon a correct match between said input information 
and said stored data being achieved. 

3. A device as claimed in claim 1 or 2, in which 
said input information is selected from either a per- 
sonal identity number, or an individual characteristic 

15 ofauser,such as afingerprint, voice print, signature, 
or other unique personal characteristic. 

4. Adevice as claimed in any preceding claim 
wherein said output information is displayed on said 
device. 

20 5. Adevice as claimed in any preceding claim 
wherein said output information is transmitted via 
ultrasonic, infrared, short range radio transmission, 
or via an electrical connectorto a remote console, in 
order to enable access to facilities thereof upon con- 

25 firmation of the identity of the user in a secure 
manner. 

6. A device as claimed in claim 5 in which the 
identity information is time-dependent and is gener- 
ated in a multi-number, time-dependent code gener- 

30 ator synchronised with an identical, remote code 
generator associated with central datastorage 
means, with which communication is possible via a 
console to which access may be sought, so that the 
module in said device is uniquely identified and, 

35 upon confirmation of the identity of the user by 
means of a personal identity number or personal 
characteristic, access to the console and thus the 
central computer system is enabled. 

7. A device as claimed in claim 6 in which the 
40 time-dependent identity information is either dis- 
played on the device or transmitted directly by said 
device via an infrared, ultrasonic, short range radio 
signal or an electrical signal to a remote console to 
which access is sought in use. 

45 8. The device as claimed in any preceding claim 
wherein said device additionally contains memory 
storage means enabling the storage of personal data 
In a non-secu re manner and able to be accessed and 
updated by the user, by a key pad incorporated in the 

50 device orconnectablethereto. 

9. A device as claimed in any preceding claim, 
wherein such is incorporated in a watch, preferably a 
wrist watch. 

10. A system for enabling the identification of in- 
55 dividuals, comprising a personal electronic identity 

device including mean&enabling output of personal 
identity information for input to a console associated 
with, or directly to, a computer-based system to en- 
able unique identification of the user of the personal 

50 identity device by means of said output information, 
corroborated by the input to said computer of a per- 
sonal identity number or the identification of a per- 
sonal characteristic of the user, to allow access to fac- 
ilties provided by said computer based system. 

65 11. A system as claimed in claim 10 in which the 



output of identity information is time-dependent and 
each personal identity device incorporates a multi- 
number code generator matched with an identical, 
remote code generator associated with the computer 
70 for uniquely identifying a particular device at a pre- 
cise moment in time. 

12. A system as claimed in claim 10 or 11 in which 
said device may interface the computerised system 
via remote consoles or via a home computer or a tele- 

75 phone link. 

13. A device as claimed in any preceding claim in 
which a radio paging means is incorporated and 
which may additionally permit full duplex operation 
allowing the reception or transmission of messages 

80 to and from said device. 

14. Adevice as claimed in any preceding claim in 
which additional devices may be attached thereto in 
order to access information contained within said de- 
vice or to provide additional storage or data forac- 

85 cess by said device. 
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